Privacy Policy

1. Who We Are

This Privacy Policy applies to the website pagos.fitalmx.com and the services provided by Market Finganas S.A.P.I. de C.V. (trading as "FitalPay" and "FitalMx"), a company organized under the laws of the United Mexican States, domiciled in Mexico City, Mexico. FitalPay operates as a regulated cross-border payment services provider.

2. Information We Collect

When you interact with our website and services, we may collect the following information:

• Contact information: Full name, corporate email address, phone number
• Business information: Company name, monthly payment volume, destination country, current payment method
• Technical data: IP address, browser type, device information, pages visited, referral source
• Communication records: Messages exchanged via WhatsApp, email, or our contact forms
• KYC/KYB data: Business registration documents, government-issued identification, proof of address (collected during onboarding, not via this website)

3. How We Use Your Information

We use the information we collect to:

• Contact you regarding your inquiry about our payment services
• Provide, operate, and improve our cross-border payment services
• Prepare personalized savings analyses and demo presentations
• Comply with regulatory requirements including AML/KYC obligations
• Send you service-related communications (not marketing, unless you opt in)
• Analyze website usage patterns to improve our service

4. Legal Basis for Processing

Under the Ley Federal de Proteccion de Datos Personales en Posesion de los Particulares (LFPDPPP), we process your personal data based on:

• Legitimate interest (Art. 8, LFPDPPP): Processing necessary to respond to your business inquiry and provide payment services
• Consent: For marketing communications, which you may opt out of at any time
• Legal obligation: Compliance with Mexican financial regulatory requirements and anti-money laundering requirements

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Regulated banking partners: For payment settlement and compliance verification, as required to provide our services
• Internal CRM system: For managing your account and communications (hosted on our own infrastructure)
• Email service provider: Amazon Web Services SES, for service-related communications
• Regulatory authorities: When required by law, including applicable financial regulatory authorities

6. Data Retention

Business contact data is retained for the duration of our business relationship plus 5 years after its termination, as required by Mexican financial regulations (Disposiciones de Caracter General a que se refiere el Articulo 115 de la Ley de Instituciones de Credito). Website analytics data is retained for 26 months. You may request deletion of your data at any time, subject to regulatory retention requirements.

7. Your Rights

Under the LFPDPPP, you have ARCO rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Cancellation: Request deletion of your data (subject to regulatory retention requirements)
• Opposition: Object to the processing of your data for specific purposes

To exercise any of these rights, contact us at privacy@fitalmx.com. We will respond within 20 business days as required by law.

California residents (CCPA): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information (we do not sell personal information). To exercise CCPA rights, contact privacy@fitalmx.com.

8. Cookies and Tracking

We use the following cookies and tracking technologies:

• Google Analytics (GA4): Website usage analytics, anonymized IP addresses, session data
• Meta Pixel: Conversion tracking for advertising campaigns. Tracks page views and form submissions
• Language preference: A local storage entry to remember your language selection (en/es)

You can disable cookies via your browser settings. Disabling cookies will not affect the core functionality of our website, but may prevent us from remembering your language preference.

9. Data Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, and access controls compliant with financial industry standards. Our infrastructure is independently assessed for security. Despite our efforts, no method of transmission or storage is 100% secure.

10. International Data Transfers

Your data may be transferred to and processed in Mexico and the United States. We ensure appropriate safeguards are in place for any cross-border data transfers in compliance with the LFPDPPP and applicable international data protection standards.

11. Contact Us

For questions, concerns, or to exercise your data rights, contact our Data Protection Officer:

Email: privacy@fitalmx.com
Company: Market Finganas S.A.P.I. de C.V.
Website: pagos.fitalmx.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.